Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
File: LD4cA--i8tn_-dvsMyW8bDdpQlA.mft (raw, json)
Hash identifier: AW+jZD5Gxvl4rEU/Omd2MFycngoeVPI7QGMbNQWdO5g=
Subject key identifier: 92:36:65:FD:8A:B4:58:3A:AA:04:74:49:A2:A3:45:38:5C:40:61:2F
Authority key identifier: 2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
Certificate issuer: /CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Certificate serial: 019CAB34ACF192D3EB798F102A59CF91C58C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
Manifest number: 1592
Signing time: Sun 01 Mar 2026 21:01:21 +0000
Manifest this update: Sun 01 Mar 2026 21:01:21 +0000
Manifest next update: Mon 02 Mar 2026 21:01:21 +0000
Files and hashes: 1: LD4cA--i8tn_-dvsMyW8bDdpQlA.crl (hash: JzaTS7b2KIqUwfA3KsaF8Xj8k4cs0QjtCC8etkcXVUI=)
2: cCc9EoKWn1mq3UkIpDhniuHoz_0.roa (hash: Bx7QtDc0qD0Q85lb0xP2V1a5BckVXkCIqQNEyBo+I68=)
3: jaTCzxQZwGVoMfE5pxy0Gbm9K_E.roa (hash: ULw0U4ZGmZtESpblMgYhOZZu7hCKbL/R7CwXeeGSDEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:ac:f1:92:d3:eb:79:8f:10:2a:59:cf:91:c5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3e1c03efa2f2d9fff9dbec3325bc6c37694250
Validity
Not Before: Mar 1 21:01:21 2026 GMT
Not After : Mar 2 21:01:21 2026 GMT
Subject: CN=923665fd8ab4583aaa047449a2a345385c40612f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a3:06:42:a0:e6:c4:ef:c7:03:ac:1b:5d:cd:
d6:d5:89:86:ef:95:02:35:c2:01:6c:5a:a9:bb:53:
a6:94:28:98:a1:1b:34:28:02:b6:d5:9e:cd:2c:cc:
f1:8a:cc:d6:90:f7:00:4c:3c:7f:a6:84:ff:40:56:
89:af:eb:d2:5e:14:f3:e8:9e:46:b9:63:90:d7:1a:
90:51:38:53:84:1c:de:41:23:ad:9d:3a:2a:e9:38:
72:be:3b:09:39:7a:23:fc:ff:a3:19:bc:ed:d4:4c:
27:d9:0b:74:b1:d1:a4:aa:b9:88:8e:b0:5a:86:f8:
6a:f2:50:73:b9:0d:6b:b4:d3:5e:14:76:27:d0:a9:
63:75:29:ad:72:95:f0:64:7a:7b:61:46:17:49:41:
61:fd:41:42:15:91:a5:80:c4:ef:10:79:14:fc:67:
57:6c:ba:52:a2:f8:a9:27:8b:1f:b7:da:0c:dd:ee:
48:01:3d:bf:c6:f3:22:c9:a0:47:91:34:3a:70:0d:
5d:9b:e0:42:fc:c8:a4:9e:36:a7:26:01:32:1d:4d:
b8:6a:8d:9e:e8:3f:be:61:87:5d:90:e1:71:2e:38:
bf:44:3b:45:a8:0b:be:8e:7d:c4:c9:37:7f:98:78:
66:f3:9f:66:ff:5f:fb:cf:d0:7d:a6:5d:59:72:76:
51:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:36:65:FD:8A:B4:58:3A:AA:04:74:49:A2:A3:45:38:5C:40:61:2F
X509v3 Authority Key Identifier:
keyid:2C:3E:1C:03:EF:A2:F2:D9:FF:F9:DB:EC:33:25:BC:6C:37:69:42:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LD4cA--i8tn_-dvsMyW8bDdpQlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/dcbd3a-7528-499e-a3bd-bf28875ab261/1/LD4cA--i8tn_-dvsMyW8bDdpQlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:22:24:9d:c1:19:38:32:00:00:eb:4c:95:93:33:bc:ca:f6:
4b:4b:41:68:14:40:72:60:6a:a8:91:9e:6b:5d:68:e8:03:80:
64:ad:88:62:75:3e:fe:0c:e3:61:2a:90:c0:51:23:7a:44:22:
21:d6:a6:d7:2a:16:e7:6f:f1:97:b9:46:69:83:dd:02:48:da:
9c:8f:39:2c:2c:79:b7:71:b1:6a:d0:e2:0e:35:cf:ad:2c:95:
dc:fb:18:00:70:a8:71:dd:fd:5f:35:fd:c4:6a:08:3e:b6:aa:
09:3f:3f:fc:3c:7e:fb:7b:9f:9d:ff:eb:00:80:e0:55:bc:ab:
6b:13:10:a4:ad:78:16:73:3b:a4:12:eb:46:74:ad:de:57:44:
0a:cc:06:d2:8a:31:56:e3:80:87:e9:68:d6:44:ee:7a:87:b4:
98:0e:6a:69:9b:56:4f:3b:f0:a8:e1:53:25:88:ef:e8:7b:e8:
41:c5:da:fc:02:6b:bf:7d:4c:0f:ac:84:17:41:9b:1e:dc:4f:
c3:1d:b8:ba:a4:e8:cf:a8:e1:b2:0a:a1:71:36:36:11:80:00:
f6:76:7d:d5:c0:39:03:8b:d7:c3:1d:92:9c:48:4e:d0:b5:3b:
5a:d9:7f:f5:e9:3b:6b:7b:f5:cd:e5:df:b8:65:f2:5b:d9:9f:
ad:93:9a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:17 2026 by rpki-client